CISA's list that day
13 October 2026
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Windows and Ivanti Connect Secure. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2026-104935Authentication Bypass by Spoofing | Ivanti Connect Secure | Patch nowForensic triage required by CISA; listed in the last 14 days | 0.26 | ||
| CVE-2026-96951Command Injection | Microsoft Windows | Patch nowForensic triage required by CISA; listed in the last 14 days | 0.02 |